Computer-Assigned Programs Cannot Be Deployed from Shares in Different Forests

This article was previously published under Q274274
This article has been archived. It is offered "as is" and will no longer be updated.
Symptoms
If the file server for a computer-assigned package is in a different forest, the assignment is not successful, and you receive error "1612":
The installation source for this product is not available. Verify that the source exists and that you can access it.


One event ID which corresponds to this issue is:

Source: Application Management        Event ID 102        The install of application "<Package Name>" from policy "<Policy Name>" failed. The error was "The installation source for this product is not available. Verify that the source exists and that youcan access it."				
Cause
Permissions to the file, and share were assigned to the computer account. This behavior is by design because Windows NT LAN Manager (NTLM), not Kerberos, is used when authenticating between forests. Therefore, no computer account authentication takes place, and the package cannot be accessed. If the source files are being stored on a Windows NT 4.0 or Windows 2000 Cluster server, it will only use NTLM for authentication. Machine accounts require Kerberos for authentication; therefore the source files cannot be stored on a Windows NT 4.0 or Windows 2000 Cluster Server.
Resolution
Assign permissions to authenticated users on the file, and share permissions that contain the medium-scale integration (MSI) package.
Status
This behavior is by design.
More information
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
278472 Packages Assigned to Computers with Group Policy Are Not Installed
msi ntlm machine-assigned 1612
Properties

Article ID: 274274 - Last Review: 10/26/2013 06:03:00 - Revision: 4.0

  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • kbnosurvey kbarchive kbenv kbprb KB274274
Feedback